Dual approval for sensitive changes
Some changes open more of your organisation's diagrams to the outside. On Enterprise, one person asks and a second person approves: the request waits in Approvals until someone else decides. Nobody approves their own request.
On this page
What needs a second person
On Enterprise, these changes are asked by one owner or security administrator and approved by another:
| In Approvals | The change |
|---|---|
| Assistant | Turning the Assistant on, or changing who answers. |
| AI ceiling | Letting the Assistant read diagrams of a higher level. Lowering it applies at once. |
| Web search | Turning web research on for the Assistant. |
| Audit log | Keeping the log for a shorter time. |
Turning something off, or lowering what the Assistant reads, never waits: closing is always one person's decision.
How a request goes
- A first person makes the change, for example in the AI settings. iyedy says Asked a second administrator to approve. and the setting shows Waiting for a second administrator to approve with the date.
- A second owner or security administrator opens Approvals… from the palette: What waits for your decision in Claims Architecture. Each one asks a second person. Each line says who asked, when, and the effect, for example The Assistant will be turned on.
- They choose Approve or Deny. The first person can withdraw the request with Withdraw my request while it waits.
Both sides need a recent sign-in. Each request and each decision is recorded in the audit log.
Why two people
These changes send more of your diagrams to the AI service or keep less trace of what happened. A second person catches a mistake, a stolen session or a decision taken alone. Nobody approves their own request: Someone else must approve your own request.
Diagrams leaving the organisation
Copying or moving a diagram out of an organisation follows its rule. On Team, an administrator must agree: This diagram leaves Claims Architecture: an administrator must agree. On Enterprise, diagrams do not leave: Your organisation does not let its diagrams out.
What this means for you
- Keep two owners or security administrators who can act. An Enterprise organisation keeps two owners in any case.
- Tell the second person when you ask: the request waits until they open Approvals.
- Plan ahead for a change that needs approval, such as turning the Assistant on for a pilot.
Was this page helpful?Your answer is anonymous and counts only if you accepted measurement.
What went wrong?
Don't write personal data.